well its good to know it can be done! The risk assessment is what I have an issue with. I want someone in here that can lead that and write the processes up accordingly.

Its a risk based thinking that is asked for in the risk based approach.
That you are in a good and profitable business, and an ISO 9001 organization, is in itself a great standing.
Now where are some of your vulnerable processes. Do the procedures, controls and training at such places needs attention. By doing this consciously and by keeping a record (Management review) you are good.You need no scoring and tabulation aka Risk management. What else is the specific that you are caught with ?
You need no consultant. Just need understanding and confidence..... Good Luck

Good day @pammesue;
I am certain there are numerous participants on this site who are very capable of assisting you. I hesitate to "promote" via this site in order to keep Elsmar.com from becoming a commercial rather than an informative source of free information. However, since you have specifically asked for potential consulting/contracting options, I encourage you to reach out to me via my LinkedIn page/credentials. What you described is within the scope of what I do, and have been specifically doing for numerous companies. Feel free to contact me via LinkedIn and we can begin a dialogue regarding options to help your organization with what you are needing including references.
Be well.
John C. Abnet